Privacy Policy

Last updated Oct 3, 2026

AIWritingPal is a full-screen writing editor with Blue Pencil, an AI that suggests edits you can accept or reject. This policy explains what information we collect, why, who we share it with, and the choices you have. We have tried to keep it short and plain.

1. Who we are

AIWritingPal is operated by NEXLY LLC, a limited liability company in the United States (“we”, “us”). NEXLY LLC is responsible for the personal information described here. You can reach us at [email protected] or through our contact page.

2. Information we collect

Information you give us

Account details: username, email address, name, and a password, which we store only in hashed form. If you upload an avatar, we store that too. If you sign in with Google, Google shares your name and email address with us.
Your documents: the drafts you write and their version history. We store them on our servers so you can open them from any device.
Messages to us: what you send through the contact form or by email.
Email preferences: whether you have unsubscribed from product-update emails.

Information created when you use the service

AI usage metadata: for each Blue Pencil request we record the action type, language, word and token counts, cost, response time, and whether you accepted or rejected the result. We do not store the text of AI requests in these logs.
Payment records: your plan, the amount, the date, and the Stripe invoice ID. Card details are handled by Stripe; we never see your full card number.
Billing country: derived from the country header Cloudflare attaches to requests, so we can issue correct invoices.
Technical logs: our web server records IP addresses and browser user agents for security and troubleshooting.

3. How Blue Pencil handles your text

Blue Pencil suggests edits to text you select, answers questions about your draft (“Ask”), and gives editor notes on a whole draft (“Review”). Starter templates can also write a first draft from a brief you provide. To do this, the text you selected with a little surrounding context, your draft (for Ask and Review), or your brief is sent to the service provider that runs AI models for us, which returns the result to you.

Text is sent only when you use an AI feature; simply writing in the editor does not send anything to our AI provider.

We do not use your documents to train AI models.

4. How we use information

To run the service: keep you signed in, save and sync your documents, and deliver Blue Pencil results.
To process payments, issue invoices, and manage your plan.
To send account and service emails, such as password resets and important notices.
To send occasional product-update emails. You can unsubscribe at any time.
To keep the service secure, prevent abuse, and fix problems.
To understand usage in aggregate (for example, how often suggestions are accepted) so we can improve the product.
To meet legal, tax, and accounting obligations.

We do not sell your personal information, and we do not share it for advertising. We share information only with service providers that help us run AIWritingPal, and only what each one needs. They fall into these categories:

Payment processing — payments and invoices.
Cloud services — hosting our servers, storing data, and sending account emails and occasional product updates.
AI services — generating Blue Pencil and template results.
Network and security — content delivery, protection against attacks, and the bot check on our forms.
Sign-in — when you choose to sign in with another account, such as Google.

For the current list of these providers by name, email [email protected].

We may also disclose information when the law requires it, or when it is needed to protect the rights and safety of our users or others.

6. Cookies

We use only cookies that are strictly necessary for the site to work:

a session cookie that keeps you signed in;
a “remember me” cookie, if you choose it;
a security token that protects forms against cross-site request forgery;
a cookie that remembers your cookie-consent choice.

Cloudflare may also set security cookies to protect the site. We do not use advertising cookies or third-party analytics trackers.

7. How long we keep it

Documents are kept until you delete them or delete your account.
When you delete your account, your account data and documents are removed from our active systems within 30 days and from backups within 90 days.
Payment and transaction records are kept as long as tax and accounting rules require, up to 7 years.
AI usage metadata is anonymised when you delete your account.
Email opt-out records are kept so we can keep honouring your choice not to receive emails.

8. Security

The whole site uses HTTPS, passwords are stored hashed, and access to production systems is limited to the operator. No system is perfectly secure, so we cannot guarantee absolute security, but we work hard to protect your information.

9. International transfers

Our servers are in the United States. To provide the service, our service providers may also process your information outside your country or region. Wherever your information is processed, we take steps so it is protected as this policy describes.

10. Your choices and rights

Access and correct: you can see and update your account details in account settings.
Export: you can export your documents from the editor at any time.
Delete: you can delete your account yourself in account settings.
Unsubscribe: every product-update email has an unsubscribe link, and you can also turn these emails off in account settings.
Object or restrict: you can ask us to stop or limit certain uses of your information.

For anything you cannot do yourself, email [email protected]. We respond within 30 days. We may need to verify your identity first.

11. Regional rights

EEA and UK: under the GDPR and UK GDPR you have the rights listed above, including data portability, and the right to complain to your local data protection authority. We process your information to provide the service you signed up for, to meet legal obligations, and for our legitimate interests in keeping the service secure and improving it; where we rely on consent, you can withdraw it at any time.

California: under the CCPA you may request to know, correct, and delete the personal information we hold about you, and we will not treat you differently for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising.

China: users in mainland China may exercise their rights under the Personal Information Protection Law (PIPL) by contacting us.

12. Children

AIWritingPal is not intended for children under 13, or under 16 in the EEA where local law requires. We do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.

13. Changes to this policy

When we update this policy we will post the new version here and change the date at the top. If a change is material, we will also tell you by email or with a notice in the app before it takes effect.

14. Contact us

Questions about privacy or this policy? Email [email protected] or use our contact page. Our Terms of Service explain the rules for using AIWritingPal.